UNKNOWN NVD

CVE-2026-91046

The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not perform authorization checks that halt execution in several of its settings-save

The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not perform authorization checks that halt execution in several of its settings-save handlers, allowing users with subscriber-level access and above to overwrite the ElementsReady Addons for Elementor WordPress plugin through 6.7.2's stored settings, including its stored API credentials and its feature and template configuration.

References

https://wpscan.com/vulnerability/ed5271e4-3e8d-49b6-9118-2f4ef5116043/

Published: 2026-10-19 · Source: NVD · Feed updated: 2026-10-19

This unknown severity vulnerability was published on 2026-10-19 via NVD.

vulnfeed aggregates 17512 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.